RHAM is a product under active development. This page is a truthful summary of how the software behaves — it is not a contract drafted by a lawyer, and it is not legal advice. Before RHAM takes real payments it will need proper terms reviewed by someone qualified.
Terms of use
You need an account to use the workspace. You are responsible for keeping your password to yourself, and for the content of the briefs you write.
What you make is yours. Palettes, logo concepts, copy, guidelines and exported assets belong to you, with no claim from us on them and no attribution required — including on the free plan.
Plans and billing. Solo is free. Paid plans are charged in advance for the period you choose. Changing plan takes effect immediately and starts a new period; there is no proration. Cancelling stops the next renewal and leaves your access running until the period you already paid for ends. A trial lasts 14 days, is available once per account, and ends by returning you to Solo rather than by charging you.
Availability. Generation runs locally and deterministically, so the same brief produces the same identity. Nothing here is a guarantee of uptime, and you should keep exports of work you depend on.
Ending it. You can delete your account yourself, at any moment, from Account → Security. We may close an account that is being used to break the law or to attack the service.
What is stored, and where
On the server— only what an account needs: your email, your name, an optional company, a scrypt hash of your password (never the password), whether you opted into product email, your subscription and its invoices, and one row per signed-in device holding a hashed session token, the browser’s user agent and IP address.
In your browser— every brand project. Briefs, strategies, palettes, logo concepts, copy and saved inspiration live in this browser’s local storage, partitioned per account. They are not uploaded, which is also why they do not follow you to another machine yet.
Cookies — one, named rham_session. It is http-only, same-site, and holds a signed pointer to your session rather than any personal data. Choosing “keep me signed in” makes it last 30 days instead of ending with the browser. There is no analytics or advertising cookie.
Email — sent only for things you triggered: confirming an address, resetting a password, a password-change warning, and subscription receipts. Product news is opt-in and off by default.
Deletion — deleting your account removes the account, its sessions, its pending links and its invoice history from the server immediately. Projects held in your browser are yours to clear; export anything you want to keep first.
Questions about any of this belong in your account first — Account shows everything stored about you. Anything left over: support@rham.app.